CVE-2021-21239-Exploit

세부 보고서는 아래에 있습니다 https://docs.google.com/document/d/157fGn7lLP1uBuRz8zUgRDWTDklKznljeOWwRQ-C6uFg/edit?usp=sharing 사용법 python main.py...

CVE-2019-10172

CVE-2019-10172 https://vulners.com/cve/CVE-2019-10172 이 구성 요소/패키지의 알려진 취약하지 않은 버전이 없습니다. 대체 구성 요소나 잠재적 완화 조치를 조사하는 것이 좋습니다. 완화 1. 권장 모든 경우에 대해 com.codehaus.jackson에서 com.fasterxml.jackson으로 전환을 시도하고 com.codehaus.jackson 라이브러리를 제거하십시오. 2. 패치된 라이브러리를 사용하십시오: 참조...

CVE-2025-12748

CVE-2025-12748 Eng Rus 크레딧: Svyatoslav Tereshin @TERESH1, Artem Mukhin @saladosss 이슈: 687, 825 English 설명 XML 파일 처리 과정에서 문제가 발견되었습니다. 파일 내용 처리가 ACL 검사보다 먼저 수행됩니다. 이로 인해 제한된 권한을 가진 사용자가 특수하게 조작된 XML 파일을 제출하여 과도한 리소스 소비를 유발할 수 있으며, 이는 잠재적인 서비스 거부DoS 공격으로 이어질 수 있습니다. 환경 설정 1. OS: Alt Linux P10 serve...

CVE-2026-12752

IBM Business Automation Workflow containers and traditional is vulnerable to an XML external entity injection XXE attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resource...

EUVD-2026-78865

IBM Business Automation Workflow containers and traditional is vulnerable to an XML external entity injection XXE attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resource...

CVE-2026-12752

IBM Business Automation Workflow (containers and traditional) is vulnerable to an XML external entity injection (XXE) attack when processing XML data. A remote attacker with low privileges could exploit this to expose sensitive information or consume memory resources . The assigned CVSS 3.1 score...

CVE-2026-12752 Multiple security vulnerabilities addressed with IBM Business Automation Workflow August 2026

IBM Business Automation Workflow containers and traditional is vulnerable to an XML external entity injection XXE attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resource...

Vulnerability handling in Palo Alto Networks PAN-OS

Palo Alto Networks has identified a vulnerability in the PAN-OS software, specifically related to VM-Series and PA-Series firewalls, as well as the Panorama management software. The vulnerability involves a buffer overflow in the XML processing function of PAN-OS. Unauthorized attackers with...

EUVD-2026-78159

IBM Business Automation Workflow containers and traditional is vulnerable to an XML external entity injection XXE attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources...

CVE-2026-12756

IBM Business Automation Workflow containers and traditional is vulnerable to an XML external entity injection XXE attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources...

CVE-2026-13287

IBM MQ 9.1.0.0 through 9.1.0.37 LTS, 9.2.0.0 through 9.2.0.43 LTS, 9.3.0.0 through 9.3.0.41 LTS, 9.3.0.0 through 9.3.5.1 CD, 9.4.0.0 through 9.4.0.25 LTS, 9.4.0.0 through 9.4.5.1 CD, and 10.0.0.0 is vulnerable to an XML external entity injection XXE attack when processing XML data. A remote...

CVE-2026-13285

IBM MQ is vulnerable to an XML external entity injection XXE attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources...

CVE-2026-12756

IBM Business Automation Workflow (containers and traditional) is vulnerable to an XML External Entity (XXE) injection when processing XML data. A remote attacker with low privileges could exploit this to expose sensitive information or consume memory resources . The vulnerability is rated CVSS 7....

CVE-2026-12756 Multiple secuirty vulnerabilies addressed with IBM Business Automation Workflow August 2026

IBM Business Automation Workflow containers and traditional is vulnerable to an XML external entity injection XXE attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources...

CVE-2026-12756 Multiple secuirty vulnerabilies addressed with IBM Business Automation Workflow August 2026

IBM Business Automation Workflow containers and traditional is vulnerable to an XML external entity injection XXE attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources...

CVE-2026-13285

IBM MQ Managed File Transfer is vulnerable to XML external entity injection (XXE) in its template parser (CWE-611). A remote attacker with low privileges can exploit this over the network to expose sensitive information or consume memory resources, rated CVSS 7.1 HIGH (C:H, I:N, A:L). Affected ve...

EUVD-2026-78153

IBM MQ 9.1.0.0 through 9.1.0.37 LTS, 9.2.0.0 through 9.2.0.43 LTS, 9.3.0.0 through 9.3.0.41 LTS, 9.3.0.0 through 9.3.5.1 CD, 9.4.0.0 through 9.4.0.25 LTS, 9.4.0.0 through 9.4.5.1 CD, and 10.0.0.0 is vulnerable to an XML external entity injection XXE attack when processing XML data. A remote...

EUVD-2026-78151

IBM MQ 9.1.0.0 through 9.1.0.37 LTS, 9.2.0.0 through 9.2.0.43 LTS, 9.3.0.0 through 9.3.0.41 LTS, 9.3.0.0 through 9.3.5.1 CD, 9.4.0.0 through 9.4.0.25 LTS, 9.4.0.0 through 9.4.5.1 CD, and 10.0.0.0 is vulnerable to an XML external entity injection XXE attack when processing XML data. A remote...

CVE-2026-13287

IBM MQ is vulnerable to an XML external entity injection (XXE) in the Managed File Transfer monitor result parser (CWE-611). A remote attacker with low privileges can exploit this to expose sensitive information or consume memory resources . Affected versions span 9.1 through 10.0.0.0 across LTS ...

Astra Linux – Vulnerability in openjdk-11

Vulnerability in the Oracle Java SE and Oracle GraalVM Enterprise Edition products of Oracle Java SE component: JAXP. The supported versions affected include Oracle Java SE: 7u321, 8u311, 11.0.13, 17.0.1; Oracle GraalVM Enterprise Edition: 20.3.4 and 21.3.0. This easily exploitable vulnerability...